#Vercel

The kernel bug from Vercel's $1M sandbox challenge is now CVE-2026-99999 — and NVD hasn't listed it

A malformed checksum in the Linux IPv4 stack can corrupt host memory from a guest VM. Scored 9.3, fixed upstream on October 15, still marked unfixed by Red Hat and absent from NVD.